Resurgence Of The Mexals Cryptojacking Campaign
The Mexals crypto jacking campaign has been in operation since at least 2021 and continues to evolve.
A new wave of attacks started in late 2022 with new functionality including SSH worm and LAN spreader modules and improved obfuscation.
The malicious software kills competitor miners and CPU-heavy processes clears command history for defense evasion and creates a cron job for persistence.
Featured Resources
View More Resources
blog
CVE-2026-32196: One-Click RCE via Windows Admin Center Control Flow Hijacking
Ilan Kalendarov, Security Research Team LeadBen Zamir, Security ResearcherElad Beber, Security ResearcherRuben Enkaoua, Security Researcher Cymulate Research Labs identified a set of
Webinar
Cymulate Stories: A Fireside Chat with Morgan Street Holdings
Many organizations still manage cyber risk using reactive security practices that struggle to keep pace with today’s threat landscape. As
blog
The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape
AI tools shipped fast - but weak sandboxing left escape paths, exposing systems to data access, abuse, and full compromise.